$ rpki-client -vvf rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft File: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft (raw, json) Hash identifier: P8a5sFBnvD928VuLz1OQfiLMsSiTz66P8bz2xgCmcZI= Subject key identifier: A8:13:5A:D6:70:D9:19:5E:BE:55:5F:41:F4:F4:2E:38:A1:16:5A:7A Authority key identifier: FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79 Certificate issuer: /CN=A91216AC/serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79 Certificate serial: 0470 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft Manifest number: 046D Signing time: Sat 27 Apr 2024 01:40:19 +0000 Manifest this update: Sat 27 Apr 2024 01:40:18 +0000 Manifest next update: Sat 04 May 2024 01:40:18 +0000 Files and hashes: 1: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl (hash: h5VBBOaS81od7nho4DAcUhthj9HrnMzQhjxOAVV6Hu4=) 2: AE1E5A1AF61C11EBAB08AF17C4F9AE02.roa (hash: veSmbVji3pBKrgMKJbGq+KO1HuBY79NuLYXXcENVDCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 May 2024 01:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1136 (0x470) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91216AC/serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79 Validity Not Before: Apr 27 01:40:18 2024 GMT Not After : May 4 01:40:18 2024 GMT Subject: CN=662c5782-c6b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:28:59:eb:7e:9d:29:c5:84:9f:4d:72:7e:e6: 72:d8:3b:6b:09:77:31:f1:6b:48:55:0e:b3:48:2b: 16:9b:d4:9c:38:03:14:9b:79:5e:ec:f3:74:7b:f8: b5:4b:db:34:a7:69:42:b2:34:24:a4:1a:96:63:26: 59:2b:19:bb:97:18:f3:b8:dc:15:57:e6:af:a0:31: 51:39:5f:ca:b9:c1:00:be:38:0e:2b:f7:fd:28:da: eb:ec:d8:9b:d5:eb:74:47:de:e7:61:eb:f3:3b:79: e8:9c:7b:6c:3e:12:17:53:bf:b0:3b:59:ee:4c:7a: 8c:d0:59:81:98:d7:6a:d5:cc:d7:e6:22:6f:94:bc: ce:1b:08:ef:c8:e6:e4:64:e7:7c:ec:f5:ec:42:d9: da:5d:d4:63:45:8c:c3:94:24:02:40:72:28:b0:b6: 7a:14:98:0a:b9:3e:65:ec:64:6a:ee:1d:fb:67:23: 0c:8e:24:41:74:40:59:b3:25:bf:71:8b:5b:91:c1: 66:3f:f7:9d:19:a0:05:da:9c:2d:9c:68:54:e7:52: 66:c4:25:83:32:e4:66:68:ec:73:a2:c6:81:bb:f6: a3:44:04:01:97:11:41:51:84:d2:5f:2d:34:58:18: dd:3f:86:0d:ab:18:bc:be:00:7b:31:dc:5f:66:96: a8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:13:5A:D6:70:D9:19:5E:BE:55:5F:41:F4:F4:2E:38:A1:16:5A:7A X509v3 Authority Key Identifier: keyid:FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:79:1f:5b:ae:86:b4:57:0c:dd:8e:07:4a:d2:b9:8f:cc:ea: d7:4a:13:aa:59:87:b4:dc:70:1e:69:94:eb:79:7f:c6:0e:47: fe:db:d7:d5:6d:cd:71:24:a8:d7:50:bf:63:85:85:02:83:05: 97:81:c7:fb:60:53:77:56:cf:7d:f2:7e:45:ff:81:62:27:2b: fa:54:9d:06:44:f7:7d:48:6c:cf:eb:2b:64:7e:cf:9f:55:a0: ee:aa:f8:64:90:78:4e:d1:54:db:1e:e9:ad:66:e8:64:c0:d0: 72:0f:2e:fd:53:9b:6c:35:f4:60:38:a5:b2:ac:e3:8e:bd:e9: 31:d8:9e:b4:26:10:4d:11:a6:ce:28:30:20:6b:22:e5:59:70: 45:96:1a:a2:7d:d4:dc:97:9d:73:fc:6f:70:99:fc:6e:64:bf: ed:6d:db:4e:17:28:e2:2b:d2:67:4d:67:c8:95:2b:72:98:c8: 1d:15:c5:b2:30:01:b8:50:0b:d4:40:95:24:59:fe:77:d2:2f: c9:36:34:dc:67:a0:0f:47:c2:ae:8b:c0:df:50:f1:a3:63:a6: a3:03:9e:6d:27:33:f2:bc:66:ae:16:c0:36:c1:dd:74:24:0b: c8:96:37:ee:b3:cc:0f:14:a8:27:1e:d7:dd:27:f6:e1:9e:e6: 41:27:d5:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE2QUMxMTAvBgNVBAUTKEZFNUYxQzc1MDA0OEJCNTRFMDEzNzNBQzNFREQ0Qjc3 N0Q4ODhFNzkwHhcNMjQwNDI3MDE0MDE4WhcNMjQwNTA0MDE0MDE4WjAYMRYwFAYD VQQDEw02NjJjNTc4Mi1jNmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyhZ636dKcWEn01yfuZy2DtrCXcx8WtIVQ6zSCsWm9ScOAMUm3le7PN0e/i1 S9s0p2lCsjQkpBqWYyZZKxm7lxjzuNwVV+avoDFROV/KucEAvjgOK/f9KNrr7Nib 1et0R97nYevzO3nonHtsPhIXU7+wO1nuTHqM0FmBmNdq1czX5iJvlLzOGwjvyObk ZOd87PXsQtnaXdRjRYzDlCQCQHIosLZ6FJgKuT5l7GRq7h37ZyMMjiRBdEBZsyW/ cYtbkcFmP/edGaAF2pwtnGhU51JmxCWDMuRmaOxzosaBu/ajRAQBlxFBUYTSXy00 WBjdP4YNqxi8vgB7MdxfZpaojwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgTWtZw 2RlevlVfQfT0LjihFlp6MB8GA1UdIwQYMBaAFP5fHHUASLtU4BNzrD7dS3d9iI55 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTZBQy8zOEQyMzcyMkY2 MTcxMUVCQjIwRjFBNEVDNEY5QUUwMi9fbDhjZFFCSXUxVGdFM09zUHQxTGQzMklq bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19sOGNkUUJJdTFUZ0UzT3NQdDFMZDMySWpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTZBQy8zOEQyMzcyMkY2MTcxMUVCQjIwRjFBNEVDNEY5QUUwMi9fbDhjZFFCSXUx VGdFM09zUHQxTGQzMklqbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAueR9broa0VwzdjgdK0rmPzOrXShOqWYe03HAeaZTreX/GDkf+29fV bc1xJKjXUL9jhYUCgwWXgcf7YFN3Vs998n5F/4FiJyv6VJ0GRPd9SGzP6ytkfs+f VaDuqvhkkHhO0VTbHumtZuhkwNByDy79U5tsNfRgOKWyrOOOvekx2J60JhBNEabO KDAgayLlWXBFlhqifdTcl51z/G9wmfxuZL/tbdtOFyjiK9JnTWfIlStymMgdFcWy MAG4UAvUQJUkWf530i/JNjTcZ6APR8Kui8DfUPGjY6ajA55tJzPyvGauFsA2wd10 JAvIljfus8wPFKgnHtfdJ/bhnuZBJ9UV -----END CERTIFICATE-----Generated at Sat Apr 27 10:18:31 2024 by rpki-client on console-ams.rpki-client.org